Do you need a KRA PIN for a betting account in Kenya?

The Gambling Control Act, 2025 and the Operations Regulations ask for proof of age, an identity check, a location check and know-your-customer verification at registration. None of the provisions read for this guide names a KRA PIN as a player requirement. A PIN appears in the licensing rules for operators, and an operator's own terms may ask for more.

By WebTech Kenya Editorial (prepared with AI tools under our editorial policy) · Last updated 2026-11-03

The short answer

The registration rules in the Gambling Control Act, 2025 and in the Conduct of Gambling Operations Regulations, 2026 are about age, identity and location. The texts read for this guide do not name a KRA Personal Identification Number (PIN) as something a player must hand over. Whether a particular operator asks for one is a matter of its approved terms, which you can read before you register.

The wider picture of what is checked at sign-up is in the guide on proof of age and identity checks. This page narrows it to one document and one question: where a PIN fits.

What the registration rules actually list

Section 72(1) of the Act says a licensee shall not allow a person to take part as a player unless the person is registered and holds an account with the licensee. Section 72(3) requires proof of age of majority before every registration, and section 72(5) requires a licensee that learns of false information at registration to refuse or cancel it.

Regulation 85 goes further for online play. A licensee must carry out an identity check, location verification and an age assurance check before a person takes part, using reliable, independent and electronically verifiable data sources before the account is activated and before any wagering deposit is received. Regulation 98(2) adds that a licensee must verify the identity of all punters under the know-your-customer requirements of the Proceeds of Crime and Anti-Money Laundering Act.

The PIN row is the only one that carries a PIN, and it concerns the company seeking a licence. Nothing in the player rows above uses the word.

What a PIN is, and what KRA says about winnings

KRA's PIN registration page describes a PIN as a Personal Identification Number used while doing business with KRA, other government agencies and service providers. That is the tax side of identity. The identity checks at registration come from the gambling rules, and the two should not be confused.

KRA's withholding tax page lists winnings from betting, gaming, prize competition and gambling at 20% for residents and non-residents. It also says that for payments to residents, withholding tax is a final tax when it relates to winnings. Payment is made through iTax, and the withholding certificate is sent to the email the taxpayer registered on iTax, which is the payer's side of the process. The guide on how the 20% tax shows on a payout shows what that looks like on a statement.

Why an operator might still ask for a PIN

The Act and regulations set minimum checks. This guide found no provision that forbids an operator from collecting more, provided the collection fits its approved terms and data protection law. Regulation 4(2)(l) requires those terms to cover payment of eligible taxes and statutory deductions, so a request for a PIN would normally be explained there.

The reason matters for your data. A PIN is a tax identifier, so ask what it will be used for, how long it is kept and who sees it. The guide on how long a betting company keeps your personal data covers retention.

Illustrative example

The figures are invented round numbers at the 20% rate read on the KRA page, and they ignore wallet charges. They show that the tax follows the payment, not any document you hold.

1. Winning amount

   An account shows winnings of KES 10,000.

2. Tax at 20%

   10,000 x 0.20 = KES 2,000.

3. Amount paid out

   10,000 - 2,000 = KES 8,000 before any wallet charge. The arithmetic does not use a PIN. How an operator measures the winning amount is set out in its terms.

How to handle a request for a PIN

1. Find where the request comes from

   Check whether it appears in the operator's own app or site, or in a message from someone else. Fake agents sometimes ask for ID documents, as the guide on fake betting agents on WhatsApp and Telegram explains.

2. Read the terms

   Look for the tax section and for any line that says what identity documents are collected.

3. Ask in writing

   Ask the operator's customer care what the PIN is for, and whether the account can be verified without it.

4. Check the licence

   Confirm the operator is on the regulator's register before sharing any identity document.

5. Keep a record

   Note the date, the channel and what you were told. If you have no PIN, KRA's PIN registration page is the official starting point.

What this page does not settle

Operators' terms differ and this page cannot read them for you. Tax law changes by Finance Act, and your own filing position is a question for KRA or a qualified adviser. Gambling is addictive: play responsibly, and see responsible gambling for help lines and self-exclusion.